Senior Manager, Security

Role overview

Lead a product security team and help shape how security operates across an engineering organization. The role combines people leadership, technical judgment, incident management, and program design, with an emphasis on risk-based priorities, engineering team ownership, and automation.

Responsibilities

- Set priorities for the security team and allocate work to the highest-value risks. - Simplify security workflows by clarifying ownership, automating repeatable steps, and reducing unnecessary review effort. - Help product engineering teams take responsibility for their security findings; define severity, validate fixes, and make security posture visible in service reviews. - Improve the intake and routing of findings and requests to reduce noise and manual decisions. - Lead security incidents from escalation through communications and post-incident review; act as a delegated decision-maker for vendor and access matters. - Report service-level performance monthly, executive security posture quarterly, and maintain a risk register that informs priorities.

Requirements

- At least five years in formal security or engineering management, including management of senior engineers. - Demonstrated experience shifting a security function from gatekeeping toward measurable engineering team ownership. - Experience managing SaaS security incidents end to end, including external communications. - Strong technical security background, including the ability to assess code changes, threat models, and cloud findings. - Experience guiding technical tradeoffs and supporting senior engineers’ development. - Familiarity with AWS security at scale and external audits such as SOC 2, ISO 27001, or FedRAMP. - Strong communication, metric interpretation, and empathetic leadership skills.